Microsoft Provides Peek at Spyware Detection Data

In the first three months after shipping Windows Defender Beta 2, Microsoft detected 22 million pieces of adware/spyware programs, resulting in roughly 14 million removals.

In the first three months after shipping the Windows Defender Beta 2 anti-spyware application, Microsoft detected 22 million pieces of adware/spyware programs, resulting in roughly 14 million removals.

According to statistics released by the Redmond, Wash., software maker, more than 60 percent of Windows Defender users opt to remove the ad-serving programs when offered a choice.

In a detailed report released at RSA Europe, in Nice, France, Microsoft offered the first glimpse of the extent of the adware/spyware threat on Windows machines, using detection and removal data from Windows Defender and the Windows Live OneCare safety scanner, two freely available tools.

/zimages/1/28571.gifRead more here about the Beta 2 release of Windows Defender.

During the period (April 11 to June 30, 2006), Windows Defender Beta 2 removed 2,849 unique families of "potentially unwanted software," programs that include adware, spyware, Trojan downloaders, setting modifiers and P2P (peer-to-peer) software bundlers.

The top 25 most removed programs include Direct Revenues ABetterInternet.DrPMon, Total Velocitys TV Media Display, Twain Techs browser add-on for Internet Explorer, WhenUs SaveNow adware program, Zango SearchAssistant and the Kazaa and BearShare file-sharing applications.

However, Microsoft cautions in the report that the data does not take into account whether the adware/spyware was installed by itself or as part of a bundle; whether consensual installation was fulfilled; or whether the program was installed by the primary operator of the computer. "Because these variables are not included, one must be careful not to draw unwarranted conclusions from the data," company officials said.

The data culled from the Web-based Windows Live OneCare safety scanner—which also detects and removes spyware—shows slightly different results, primarily because users are actively looking to remove a potential threat.

On the OneCare scanner, WhenUs SaveNow program was the most removed program, followed by NewDotNet, Kazaa, Claria, Hotbar and Zango SearchAssistant.

/zimages/1/28571.gifCheck out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at Security Center Editor Larry Seltzers Weblog.